claudia.keller/openclaw-vainplex
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): prevent gateway token from defaulting to 'undefined' string

Browse source
This commit is contained in:
Hisleren 2026-01-30 23:06:07 +03:00 committed by Gustavo Madeira Santana
parent 0175cedf0e
commit 201d7fa956
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/commands/configure.gateway.ts
View file

@ -177,7 +177,8 @@ export async function promptGatewayConfig(
}), }),
runtime, runtime,
); );
gatewayToken = String(tokenInput).trim() || randomToken(); const rawInput = tokenInput ? String(tokenInput).trim() : "";
gatewayToken = rawInput || randomToken();
} }
if (authMode === "password") { if (authMode === "password") {

4
src/wizard/onboarding.gateway-config.ts
View file

@ -182,7 +182,9 @@ export async function configureGatewayForOnboarding(
placeholder: "Needed for multi-machine or non-loopback access", placeholder: "Needed for multi-machine or non-loopback access",
initialValue: quickstartGateway.token ?? "", initialValue: quickstartGateway.token ?? "",
}); });
gatewayToken = String(tokenInput).trim() || randomToken(); // FIX: Ensure undefined becomes an empty string, not "undefined" string
const rawInput = tokenInput ? String(tokenInput).trim() : "";
gatewayToken = rawInput || randomToken();
} }
} }